Home

Issue with Windows Hello after fresh restart with autopilot.

%3CLINGO-SUB%20id%3D%22lingo-sub-289173%22%20slang%3D%22en-US%22%3EIssue%20with%20Windows%20Hello%20after%20fresh%20restart%20with%20autopilot.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-289173%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20several%20computers%20added%20to%20autopilot.%3C%2FP%3E%3CP%3EI%20also%20have%20Windows%20Hello%20disabled.%3C%2FP%3E%3CP%3EBut%20when%20giving%20the%20device%20a%20fresh%20start%20in%20Intune%2C%20it%20asks%20to%20set%20a%20Pin%20with%20Windows%20Hello.%3C%2FP%3E%3CP%3EHow%20is%20this%20possible%3F%20i%20disabled%20Windows%20Hello%20in%20Intune.%3C%2FP%3E%3CP%3EAny%20else%20having%20this%20issue%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-289173%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAutopilot%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EFresh%20start%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Hello%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-289696%22%20slang%3D%22en-US%22%3ERe%3A%20Issue%20with%20Windows%20Hello%20after%20fresh%20restart%20with%20autopilot.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-289696%22%20slang%3D%22en-US%22%3ERemote%20triggering%20of%20Autopilot%20Reset%20is%20available%20from%201809.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-289433%22%20slang%3D%22en-US%22%3ERe%3A%20Issue%20with%20Windows%20Hello%20after%20fresh%20restart%20with%20autopilot.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-289433%22%20slang%3D%22en-US%22%3E%3CP%3Ei%20found%20out%20what%20was%20going%20wrong.%20It%20happend%20on%20the%20devices%20i%20gave%20a%20fresh%20start%20in%20Intune%20with%20autopilot.%3C%2FP%3E%3CP%3EApparently%20there%20is%20a%20problem%20that%20the%20device%20get%20unenrolled%20from%20intune.%20But%20not%20from%20Azure%20AD.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20after%20giving%20a%20fresh%20start%20(without%20retaining%20user%20data)%20the%20device%20becomes%20unmanagable%2C%20does%20not%20sync%20the%20settings%20from%20intune)%20and%20so%20does%20not%20sync%20the%20Hello%20setting.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EUnfortunately%20is%20don%60t%20understand%20why%20Microsoft%20does%20this%20like%20this.%20Because%20this%20makes%20the%20Fresh%20start%20option%20when%20u%20dont%20want%20to%20retain%20the%20user%20data%2C%20completely%20usesless.%20I%20hope%20the%20AutoPilot%20reset%20becomes%20available%20quickly%20because%20i%20think%20that%20would%20solve%20this%20issue%20%3A)%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-289266%22%20slang%3D%22en-US%22%3ERe%3A%20Issue%20with%20Windows%20Hello%20after%20fresh%20restart%20with%20autopilot.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-289266%22%20slang%3D%22en-US%22%3E%3CP%3ESo%20this%20might%20be%20a%20race%20condition.%20The%20status%20page%20makes%20sure%20all%20policies%20are%20in%20place%20befor%20the%20desktop%20is%20loaded.%20In%20your%20case%20the%20WHfB%20disable%20setting%20might%20not%20be%20there%20as%20the%20desktop%20loads%20and%20the%20PIN%20dialog%20is%20shown.%20try%20set%20the%20status%20page%20and%20test%20again.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3C%2FP%3E%0A%3CP%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-289265%22%20slang%3D%22en-US%22%3ERe%3A%20Issue%20with%20Windows%20Hello%20after%20fresh%20restart%20with%20autopilot.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-289265%22%20slang%3D%22en-US%22%3EHi%20Oliver%2C%3CBR%20%2F%3Ei%20have%20set%20it%20to%20Disabled%20and%20the%20Status%20page%20setting%20is%20set%20to%20No.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-289263%22%20slang%3D%22en-US%22%3ERe%3A%20Issue%20with%20Windows%20Hello%20after%20fresh%20restart%20with%20autopilot.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-289263%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20did%20you%20set%20it%20to%20disabled%20or%20not%20configured%3F%20Do%20you%20have%20the%20auto-enrollment%20configured%20and%20do%20you%20have%20the%20Enrollment%20Status%20page%20active%3F%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20you%20have%20set%20it%20to%20disabled%20and%20auto-enrollment%20with%20Enrollment%20Status%20page%20set%2C%20the%20setting%20should%20be%20on%20the%20device%20before%20the%20Pin%20creation%20dialog%20would%20get%20the%20chance%20to%20pop%20up%20and%20therefore%20it%20would%20be%20effectively%20prevented.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3C%2FP%3E%0A%3CP%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Peter van der Zande
New Contributor

Hi,

 

I have several computers added to autopilot.

I also have Windows Hello disabled.

But when giving the device a fresh start in Intune, it asks to set a Pin with Windows Hello.

How is this possible? i disabled Windows Hello in Intune.

Any else having this issue?

 

5 Replies

Hi, did you set it to disabled or not configured? Do you have the auto-enrollment configured and do you have the Enrollment Status page active? 

If you have set it to disabled and auto-enrollment with Enrollment Status page set, the setting should be on the device before the Pin creation dialog would get the chance to pop up and therefore it would be effectively prevented.

 

best,

Oliver

Hi Oliver,
i have set it to Disabled and the Status page setting is set to No.

So this might be a race condition. The status page makes sure all policies are in place befor the desktop is loaded. In your case the WHfB disable setting might not be there as the desktop loads and the PIN dialog is shown. try set the status page and test again. 

 

best,

Oliver

i found out what was going wrong. It happend on the devices i gave a fresh start in Intune with autopilot.

Apparently there is a problem that the device get unenrolled from intune. But not from Azure AD.

 

So after giving a fresh start (without retaining user data) the device becomes unmanagable, does not sync the settings from intune) and so does not sync the Hello setting.

 

Unfortunately is don`t understand why Microsoft does this like this. Because this makes the Fresh start option when u dont want to retain the user data, completely usesless. I hope the AutoPilot reset becomes available quickly because i think that would solve this issue :)

Remote triggering of Autopilot Reset is available from 1809.
Related Conversations
Teams - Cannot open files shared in chat
AngelikaCz in Microsoft Teams on
2 Replies
collaboration and coauthoring issues in teams
Ethan Stern in Microsoft Teams on
6 Replies
Microsoft Teams status always offline
Giuliano De Luca in Microsoft Teams on
26 Replies
SPFx Dev Environment Toolchain Warnings
Charisma Riley in SharePoint Developer on
7 Replies
I cannot able to view the posts in my yammer page.
Srikanth479 in Yammer on
2 Replies
Performance issues in Excel 2016 after resent Update
Andrew Mesplay in Excel on
10 Replies